Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
File: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json)
Hash identifier: r37IOxwEByeTuHLQCQ7T6EqEAJxtS/TkP+V24znvSZU=
Subject key identifier: E6:1F:4F:F3:EA:6F:10:3A:5C:DF:E6:FB:3C:99:14:3F:E7:36:08:D1
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Certificate issuer: /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial: 019D389C2479671E89B418D4FB7829B37CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
Manifest number: 07EF
Signing time: Sun 29 Mar 2026 08:00:50 +0000
Manifest this update: Sun 29 Mar 2026 08:00:50 +0000
Manifest next update: Mon 30 Mar 2026 08:00:50 +0000
Files and hashes: 1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: E7vL9oToP0WUwC52shKmBj60+n8Njaib5hFz0lzbVXA=)
2: jbum_D98f7wXxL3zfJIV6BCwD8g.roa (hash: C+K78EzxF6K+3h9zUKmt0tIENTKcf8CCLlSHEr+JL70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:24:79:67:1e:89:b4:18:d4:fb:78:29:b3:7c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
Validity
Not Before: Mar 29 08:00:50 2026 GMT
Not After : Mar 30 08:00:50 2026 GMT
Subject: CN=e61f4ff3ea6f103a5cdfe6fb3c99143fe73608d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:33:5a:6d:c2:1b:56:8f:79:0d:87:f7:8e:
c1:5b:b8:ca:c3:3f:c0:96:bc:bb:3a:73:a8:4a:49:
86:d8:e6:a3:2d:08:28:b7:5e:cd:e8:ab:8d:5c:e3:
c8:3e:e3:ca:13:c3:42:0f:48:c0:c1:0c:a7:3b:b7:
e2:24:4b:a1:bd:bc:00:89:ec:53:ba:dd:37:69:10:
64:a1:a3:9f:9a:2a:06:21:1e:d3:fa:3a:44:67:62:
04:c1:0d:d9:6c:5c:3a:3c:63:18:b4:06:ac:07:dc:
19:cc:4b:5d:fb:2c:7e:d2:a4:2a:61:b4:62:42:98:
48:18:73:0c:12:0b:57:3f:88:c5:db:64:95:34:5c:
82:92:53:db:61:d8:84:3b:d8:f3:5e:05:31:8c:10:
1d:3a:79:fa:f1:77:0e:99:af:6b:07:e1:44:8b:00:
67:1e:1e:4e:6b:ab:a4:f2:68:3c:78:09:30:cc:a0:
77:8b:58:28:ee:61:d5:5f:2b:64:c3:f8:ac:34:2b:
8d:49:4f:f2:93:7e:6d:42:dd:e8:fd:1f:e3:5b:5b:
ca:31:5f:5c:4f:5b:0d:6f:49:ed:92:62:81:d3:60:
47:fa:91:a0:d1:4d:51:5f:8a:87:72:2d:25:e8:eb:
1f:97:e0:75:dc:2d:68:68:8d:79:ac:49:15:b0:8a:
1c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1F:4F:F3:EA:6F:10:3A:5C:DF:E6:FB:3C:99:14:3F:E7:36:08:D1
X509v3 Authority Key Identifier:
keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8d:3c:b4:63:cd:e9:2b:5f:85:c0:25:fa:eb:66:54:72:3d:
17:74:e5:ca:e0:a8:f9:d8:02:28:74:14:1c:73:e6:02:5a:26:
c5:68:66:4c:dd:30:0f:93:51:05:5b:9c:22:83:9b:c6:6b:86:
da:c1:76:ff:0f:cb:96:d0:06:e9:40:e6:ce:85:4b:19:08:58:
e5:fe:97:37:5b:b2:9b:8e:55:e7:71:cb:2b:d1:5b:58:06:f1:
87:b9:87:ea:47:c0:87:c2:c5:e3:49:20:b8:16:5c:37:cf:9f:
14:34:0a:82:57:90:89:0d:45:be:0a:aa:e4:98:dd:9f:ad:89:
70:c5:a7:91:52:b0:29:3f:76:dd:5d:5f:07:49:9c:e3:1c:41:
f2:4f:56:4e:39:96:78:db:4e:a1:04:45:15:53:fa:93:59:26:
8f:b9:66:a6:8d:54:29:9b:77:fe:7c:f2:5a:21:cc:8f:87:39:
c9:de:37:b0:09:27:64:0d:b2:f0:c9:dc:c7:32:08:1b:61:bb:
dd:42:28:0b:bc:2a:1c:bc:0c:60:a8:7d:f4:7b:88:c3:7e:7e:
72:27:7b:21:30:28:fe:c9:af:e6:2e:17:eb:92:67:f4:f7:bf:
2d:12:89:e5:ed:75:2b:c3:8e:a6:99:38:4d:e6:a6:c6:0e:50:
28:0d:c4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:48 2026 by rpki-client